$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa File: ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa (raw, json) Hash identifier: VHIM2PgbF+VBp1C0/MGHzKL5cGVArP9DbjxqmlJ3YkM= Subject key identifier: 41:2E:A7:80:C2:9E:D1:CD:CC:BA:A9:7B:83:16:EB:9C:72:F1:C1:99 Certificate issuer: /CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Certificate serial: 010D0C9F4328584F5E62C536AB02860065A1AA80 Authority key identifier: B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 33724 IP address blocks: 216.230.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c5:36:ab:02:86:00:65:a1:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f58bf75-9531-4aca-a52e-2a3241fa6dd8 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=e8291453-8e64-4148-9a42-78c79d51137d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3d:90:40:bf:cf:47:8b:f1:6e:49:f0:5e:3f: 79:e5:61:2a:c6:2f:fb:de:b9:54:c2:5c:5e:5e:54: 06:76:4e:9f:50:44:f1:a5:76:3c:3c:89:f7:b8:1b: ef:54:38:6c:f5:8f:39:47:e0:d2:22:49:cc:3b:9b: 23:40:65:26:72:33:8e:be:48:0d:1c:f2:45:35:ef: 35:94:32:bc:6a:ba:f5:ed:09:90:7d:a3:86:d6:86: 7b:88:4b:b2:e1:ab:c8:ee:9f:b2:5b:66:f0:eb:f4: 89:b2:eb:8f:97:f7:e4:29:b2:2b:3f:fc:61:8f:62: d9:4a:11:ec:f7:1e:41:ed:33:a8:26:49:be:4b:0a: 4a:f6:03:97:47:37:e4:e8:78:25:97:75:91:1c:83: 1d:0e:a4:4d:eb:83:ad:93:e2:35:f5:6e:ae:62:bb: 32:f7:23:4d:ac:db:3c:02:81:27:49:bf:87:28:20: c5:41:e0:6f:f8:e2:ba:26:16:9a:6b:09:7e:b6:3e: 4a:a7:14:96:1f:6d:41:98:8f:df:a9:fe:4c:df:2b: aa:ee:df:b8:cc:9e:82:e4:20:0d:22:3a:93:e0:06: 0a:36:b2:79:08:61:09:ca:59:63:8b:e7:a7:65:5f: dc:d7:57:63:aa:3e:29:6e:82:6f:dc:c6:26:79:bf: b7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:2E:A7:80:C2:9E:D1:CD:CC:BA:A9:7B:83:16:EB:9C:72:F1:C1:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/ce5a1214-ed4b-397f-91ed-4961c09b7a65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.crl X509v3 Authority Key Identifier: keyid:B8:CC:7C:1C:16:4D:CB:82:99:4D:2C:1D:6F:93:B6:38:08:14:0D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1f58bf75-9531-4aca-a52e-2a3241fa6dd8.cer sbgp-ipAddrBlock: critical IPv4: 216.230.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ca:8c:b7:b1:9b:5f:af:8e:94:be:e4:a9:06:cb:b8:0d:2d: 77:f3:e1:b2:0a:3c:bc:51:7d:13:f1:d1:fb:a9:ab:f6:db:e8: b8:a3:5f:9d:57:09:a3:32:eb:ce:16:86:77:06:36:c2:b5:ba: 9b:c0:e2:44:88:43:a6:a0:4c:27:ff:82:bf:72:54:6d:bc:31: 7d:81:31:1c:93:8d:f1:6c:c8:13:12:d2:4b:1a:df:ac:24:7a: 19:de:f8:44:24:78:db:28:48:a6:5f:33:9b:54:00:e5:f0:fe: 22:2a:4e:47:87:f4:b1:18:0e:7b:4d:0c:58:db:02:46:ae:8e: 87:39:03:9a:5a:8a:31:79:8b:69:80:45:02:c6:0f:40:6b:dd: 2c:f6:7e:23:2d:59:34:fa:0b:20:22:66:10:4e:10:8b:f4:13: d9:f7:c5:fa:c2:db:b3:7d:cc:a2:c8:9c:91:a3:eb:b9:e3:98: 00:38:ab:76:8e:15:4e:bf:34:40:9b:a9:b2:f3:52:d4:4b:33: 08:85:a9:c1:ef:29:5e:14:bd:d6:6f:00:b6:6b:c4:9e:01:8c: 01:df:36:32:ba:54:da:41:7e:2e:ec:8b:99:a1:e2:10:81:5b: ad:63:c7:c9:33:c5:21:5c:57:00:6c:8a:07:3a:58:4d:9b:14: aa:82:22:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsU2qwKGAGWhqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWY1OGJmNzUtOTUzMS00YWNhLWE1MmUtMmEzMjQxZmE2 ZGQ4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk ZTgyOTE0NTMtOGU2NC00MTQ4LTlhNDItNzhjNzlkNTExMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz2QQL/PR4vxbknwXj955WEqxi/73rlUwlxe XlQGdk6fUETxpXY8PIn3uBvvVDhs9Y85R+DSIknMO5sjQGUmcjOOvkgNHPJFNe81 lDK8arr17QmQfaOG1oZ7iEuy4avI7p+yW2bw6/SJsuuPl/fkKbIrP/xhj2LZShHs 9x5B7TOoJkm+SwpK9gOXRzfk6Hgll3WRHIMdDqRN64Otk+I19W6uYrsy9yNNrNs8 AoEnSb+HKCDFQeBv+OK6Jhaaawl+tj5KpxSWH21BmI/fqf5M3yuq7t+4zJ6C5CAN IjqT4AYKNrJ5CGEJyllji+enZV/c11djqj4pboJv3MYmeb+3CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEup4DCntHNzLqpe4MW65xy8cGZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4 YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMyNDFmYTZkZDgvY2U1YTEyMTQtZWQ0Yi0z OTdmLTkxZWQtNDk2MWMwOWI3YTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMWY1OGJmNzUtOTUzMS00YWNhLWE1 MmUtMmEzMjQxZmE2ZGQ4LzFmNThiZjc1LTk1MzEtNGFjYS1hNTJlLTJhMzI0MWZh NmRkOC5jcmwwHwYDVR0jBBgwFoAUuMx8HBZNy4KZTSwdb5O2OAgUDTUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xZjU4YmY3NS05NTMxLTRhY2EtYTUyZS0yYTMy NDFmYTZkZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHKjLexm1+vjpS+5KkGy7gNLXfz4bIKPLxRfRPx0fupq/bb6LijX51X CaMy684WhncGNsK1upvA4kSIQ6agTCf/gr9yVG28MX2BMRyTjfFsyBMS0ksa36wk ehne+EQkeNsoSKZfM5tUAOXw/iIqTkeH9LEYDntNDFjbAkaujoc5A5paijF5i2mA RQLGD0Br3Sz2fiMtWTT6CyAiZhBOEIv0E9n3xfrC27N9zKLInJGj67njmAA4q3aO FU6/NECbqbLzUtRLMwiFqcHvKV4UvdZvALZrxJ4BjAHfNjK6VNpBfi7si5mh4hCB W61jx8kzxSFcVwBsigc6WE2bFKqCIoY= -----END CERTIFICATE-----Generated at Tue Oct 13 16:01:57 2026 by rpki-client